F-Secure Virus Descriptions : Mawanella

NAME:	Mawanella
ALIAS:	VBSWG.Z@mm

VBS/VBSWG.Z@mm is an encrypted e-mail worm.

VARIANT: VBSWG.Z

VBSWG.Z worm spreads messages that look as follows:

    Subject:    Mawanella
    Body:       Mawanella is one of the Sri Lanka's Muslim Village
    Attachment: Mawanella.vbs

When the attached file is executed, the worm mass mails itself to each recipient in every address book and shows the following message:

    Mawanella is one of the Sri Lanka's Muslim Village.
    This brutal incident happened here 2 Muslim Mosques & 100 Shops are burnt.
    I hat this incident, What about you? I can destroy your computer
    I didn't do that because I am a peace-loving citizen.

Information about the original VBS/Onthefly.A (also known as I-Worm.Lee.o and VBS/VBSWG) is available at: http://www.F-Secure.com/v-descs/onthefly.shtml

F-Secure Anti-Virus detects Mawanella worm with the current updates:

http://www.f-secure.com/download-purchase/updates.shtml http://www.europe.f-secure.com/download-purchase/updates.shtml

[Analysis: Katrin Tocheva and Sami Rautiainen, F-Secure; May 2001]